@article{HaufeDzombetaBrandisetal., author = {Haufe, Knut and Dzombeta, Srdan and Brandis, Knud and Stantchev, Vladimir and Colomo-Palacios, Ricardo}, title = {Improving Transparency and Efficiency in IT Security Management Resourcing}, series = {IT Professional}, volume = {20}, journal = {IT Professional}, number = {01}, issn = {1520-9202}, pages = {53 -- 62}, abstract = {The authors propose a resource management process for information security management systems to more transparently plan and assign costs of controls. The process relies on and is compliant with international standards of the ISO/IEC 27000 family and can be implemented by all organizations regardless of type, size, or nature.}, language = {en} } @article{DzombetaStantchevColomoPalaciosetal.2014, author = {Dzombeta, Srdan and Stantchev, Vladimir and Colomo-Palacios, Ricardo and Brandis, Knud and Haufe, Knut}, title = {Governance of Cloud Computing Services for the Life Sciences}, series = {IT Professional}, volume = {16}, journal = {IT Professional}, number = {4}, url = {http://nbn-resolving.de/urn:nbn:de:0298-opus4-5908}, pages = {2 -- 9}, year = {2014}, abstract = {This analysis of the legal regulations for cloud computing in healthcare is based on the authors' expertise in cloud-based data processing for healthcare and life sciences organizations. The proposed implementation roadmap should help organizations govern health data processing and storage.}, language = {en} } @inproceedings{HaufeColomoPalaciosDzombetaetal.2016, author = {Haufe, Knut and Colomo-Palacios, Ricardo and Dzombeta, Srdan and Brandis, Knud and Stantchev, Vladimir}, title = {Security Management Standards: A Mapping}, series = {Procedia Computer Science}, booktitle = {Procedia Computer Science}, url = {http://nbn-resolving.de/urn:nbn:de:0298-opus4-10513}, pages = {755 -- 761}, year = {2016}, abstract = {Adjustment and cost-effectiveness are key elements of a successful Information Security Management System (ISMS). ISMS-Processes, as basic elements of every ISMS, need to be aligned to the organization and its mission. As of today, a specific ISMS process framework does not exist. ISMS processes are not in focus of current research. This article aims to fill this research gap by presenting results of a process mapping study regarding ISMS processes in the most important and widely accepted international standards for Information Security Management. Authors propose a set of ISMS processes within an ISMS process framework which should be implemented at an individually appropriate maturity level.}, language = {en} } @inproceedings{HaufeColomoPalaciosDzombetaetal.2016, author = {Haufe, Knut and Colomo-Palacios, Ricardo and Dzombeta, Srdan and Brandis, Knud and Stantchev, Vladimir}, title = {ISMS core processes: a study}, series = {Procedia Computer Science}, volume = {100}, booktitle = {Procedia Computer Science}, pages = {339 -- 346}, year = {2016}, abstract = {Adjustment and cost-effectiveness are key elements of a successful Information Security Management System (ISMS). ISMS-Processes, as basic elements of every ISMS, need to be aligned to the organization and their mission. Actually a specific ISMS process framework which clearly differentiates between ISMS processes and security measures controlled by ISMS-processes does not exist. ISMS processes itself are not focused in current research. This article will fill this research gap while containing the results of a study to identify criteria for ISMS core processes as well as to identify relevant ISMS core processes.}, language = {en} }